THREAT ACTOR
LEAKEDDATA_
ActiveLEAKEDDATA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of LEAKEDDATA, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 120
- 2025 90
- 2024 47
Leak site mirrors
2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
business-data-leaks.comsnapshot · 2026-11-11 11:02 -
ep6pheij.comsnapshot · 2026-11-11 07:01
Recent victims
The 50 most recent victims claimed by LEAKEDDATA. Total in the index: 257.
| Date listed | Victim | Description |
|---|---|---|
| 2026-11-09 | Wilentz, Goldman & Spitzer | To be announced... |
| 2026-11-09 | B... W... | To be announced... |
| 2026-11-07 | Benesch Law | |
| 2026-11-06 | Tucker Ellis | Tucker Ellis LLP is a law firm that focuses on delivering exceptional … |
| 2026-11-06 | Wachtell, Lipton, Rosen & Katz | Wachtell, Lipton, Rosen & Katz is a highly prestigious law firm headqu… |
| 2026-11-06 | B... law | To be announced... |
| 2026-11-05 | W... R... | To be announced... |
| 2026-11-05 | Smith, Gambrell & Russell, LLP | They offered $272.500 to keep the data from being published. |
| 2026-11-04 | K... R... | To be announced... |
| 2026-11-04 | W... G... | To be announced... |
| 2026-11-03 | G... R... | To be announced... |
| 2026-11-02 | S... G... | To be announced... |
| 2026-10-30 | ArentFox Schiff | ArentFox Schiff LLP is a prominent national law firm and lobbying firm… |
| 2026-10-30 | P... | To be announced... |
| 2026-10-30 | M... H... | To be announced... |
| 2026-10-30 | A... F... | To be announced... |
| 2026-10-29 | Susman Godfrey LLP | Susman Godfrey L.L.P. is a premier litigation firm recognized for its … |
| 2026-10-28 | Lowenstein Sandler LLP | Founded in 1961 and headquartered in New York City, New York, Lowenste… |
| 2026-10-28 | Morrison Foerster | Morrison Foerster is a leading international law firm with a presence … |
| 2026-10-28 | T... E... | To be announced... |
| 2026-10-28 | S... H... | To be announced... |
| 2026-10-28 | L... | To be announced... |
| 2026-10-26 | Morrison Cohen | To be announced... |
| 2026-10-22 | M... C... | To be announced... |
| 2026-10-22 | M...r | To be announced... |
| 2026-10-22 | Kirkland & Ellis LLP | To be announced... |
| 2026-10-22 | K.r.a. ...s | To be announced... |
| 2026-10-21 | K.r.. ...s | To be announced... |
| 2026-10-21 | K.r.. ... | To be announced... |
| 2026-10-21 | Porter Hedges LLP | To be announced... |
| 2026-10-20 | M... M... | To be announced... |
| 2026-10-20 | P... H... | To be announced... |
| 2026-10-20 | P...S...R... | To be announced... |
| 2026-10-19 | Latham & Watkins | Founded in 1934, Latham & Watkins is an international law firm special… |
| 2026-10-09 | O'Hagan Meyer | U.S. national law firm focused primarily on business litigation and la… |
| 2026-10-08 | Baker McKenzie | To be announced... |
| 2026-10-08 | Andersen Group Inc. | (NYSE: ANDG) reported $217.7 million in revenue for the second quarter… |
| 2026-10-07 | Andersen Group | To be announced... |
| 2026-10-06 | A...n | To be announced... |
| 2026-10-05 | Nelson Mullins Riley & Scarborough | They offered $8.000.000 to keep the data from being published. |
| 2026-10-05 | Sheppard, Mullin, Richter & Hampton | They offered $4.900.000 to keep the data from being published. |
| 2026-09-28 | S...d | To be announced... |
| 2026-09-25 | N... | To be announced... |
| 2026-09-23 | Clark Hill | To be announced... |
| 2026-09-22 | B... | To be announced... |
| 2026-09-22 | Cozen O'Connor | To be announced... |
| 2026-09-22 | Q... | To be announced... |
| 2026-09-22 | W... | To be announced... |
| 2026-09-21 | Hogan Lovells Cadwalader | To be announced... |
| 2026-09-17 | W... B... | To be announced... |
CONFIRMED ATTACKS
LeakedData confirmed attacks: 26 verified incidents
Ransomnews has verified 26 LeakedData incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from September 2024 to August 2026. United States accounts for 26 of them (100%). The most affected sector is legal, at 14 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 3; the outcome is unrecorded in the remaining 22. Where a figure was disclosed (19 cases), these incidents account for 486,804 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified LeakedData incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| August 2026 | Baker & McKenzie LLP | Legal | Illinois, United States | — | No | Source |
| August 2026 | Troutman Pepper Locke LLP | Legal | United States | — | No | Source |
| August 2026 | Sheppard, Mullin, Richter & Hampton LLP | Legal | California, United States | 2,598 | Unknown | Source |
| August 2026 | Greenberg Traurig, LLP | Legal | New York, United States | 150,000 | Unknown | Source |
| May 2026 | Fox Rothschild LLP | Legal | Pennsylvania, United States | 54,244 | Unknown | Source |
| May 2026 | Weil, Gotshal & Manges LLP | Legal | New York, United States | — | Yes | Source |
| April 2026 | Chartwell Law | Legal | Pennsylvania, United States | — | Unknown | Source |
| March 2026 | Jones Day | Legal | District of Columbia, United States | — | Unknown | Source |
| February 2026 | Plaza Home Mortgage | Finance | California, United States | 137,976 | Unknown | Source |
| February 2026 | Singleton Schreiber LLP | Legal | California, United States | 232 | Unknown | Source |
| February 2026 | Hawaii Employers' Mutual Insurance Co. (HEMIC) | Finance | Hawaii, United States | — | Unknown | Source |
| August 2025 | Moore & Van Allen PLLC | Legal | North Carolina, United States | 7,224 | Unknown | Source |
| April 2025 | McLaughlin & Stern, LLP | Legal | New York, United States | 52 | Unknown | Source |
| March 2025 | Liberty Tax Service | Finance | Virginia, United States | 88 | Unknown | Source |
| February 2025 | CRC Group (CRC Insurance Services, LLC) | Finance | Alabama, United States | 60,727 | Unknown | Source |
| February 2025 | Shutts & Bowen LLP | Legal | Florida, United States | 281 | Unknown | Source |
| January 2025 | The Roger Keith & Sons Insurance Agency | Finance | Massachusetts, United States | 884 | Unknown | Source |
| January 2025 | US Claims Capital, LLC | Finance | Florida, United States | 25,722 | Unknown | Source |
| January 2025 | Olinsky & Associates, PLLC (Olinsky Law Group) | Legal | New York, United States | 525 | No | Source |
| December 2024 | Atlas CPAs & Advisors PLLC | Finance | Arizona, United States | 982 | Unknown | Source |
| December 2024 | Black, Bashor & Porsch, LLP | Finance | Pennsylvania, United States | 4,953 | Unknown | Source |
| December 2024 | Kotz Sangster Wysocki P.C. | Legal | Michigan, United States | 8,460 | Unknown | Source |
| November 2024 | Cross Valley Federal Credit Union | Finance | Pennsylvania, United States | 17,826 | Unknown | Source |
| October 2024 | Palomar Insurance Corporation | Finance | Alabama, United States | — | Unknown | Source |
| October 2024 | Metro Public Adjustment, Inc. | Finance | Pennsylvania, United States | 2,060 | Unknown | Source |
| September 2024 | Jacobs Entertainment, Inc. (JEI) | Other | Colorado, United States | 11,970 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from LeakedData's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.